Although most cybercrime is from opportunity, another class of attacker could be targeting you in particular.

The attacker does seem to have quit a bit of personal information & account information. I still want to posit this may have been a credential stuffing, or perhaps even perhaps one of your devices had/has malware. so at this point the last past breach is looking likely.ĭid you havs any reused passwords at all among the breached accounts? As much as I have dissed on LP recently, I still hesitate to assume your troubles are the result of their breach. Unfortunately, I've been on lastpass since the early days and had a low password iteration & pretty crackable password given todays computing strength.

I'm already on a different password manager (onepassword) and have a renewed priority to keep updating stuff but I also haven't seen any reports of this happening to anyone else even after the breach. The accounts that I have caught have so far been high value targets that I didn't get around to changing (old bank, old card, old investing platform, amazon). I have never shared any of the passwords to these accounts and they were all generated and stored in lastpass only. Seems like there is a concerted effort against me and the attacker does seem to have quit a bit of personal information & account information. Attackers were able to change my address on my credit card account and access my credit card (both via phone). Luckily I have 2FA or they have sent me SMS codes so nothing bad has happened yet. I have had multiple accounts in the last month logged into & today again.

Lastpass last generated password